$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft File: K1F8a3njzrA4nUGrxeziEH_sU_s.mft (raw, json) Hash identifier: NH5JTyGyMLDTx5YAJl94nNAUPTXI0zUO1IvyAIK3xM8= Subject key identifier: D8:F7:C8:7C:86:1C:D9:AC:BF:C5:B1:4C:F3:77:6E:79:05:4E:EB:FE Authority key identifier: 2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB Certificate issuer: /CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB Certificate serial: 03D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft Manifest number: 03C5 Signing time: Wed 23 Jul 2025 01:05:21 +0000 Manifest this update: Wed 23 Jul 2025 01:05:20 +0000 Manifest next update: Wed 30 Jul 2025 01:05:20 +0000 Files and hashes: 1: K1F8a3njzrA4nUGrxeziEH_sU_s.crl (hash: iNs4l8kup+gCDFtRtlQTOom6EKwM09PEZSZs03BOWB8=) 2: B0F9178297B811ECA8AA4230C4F9AE02.roa (hash: 7UvGO2r60JLS/okHiWx8rHAHMyUcsuX/jNwXXCmMBho=) 3: 0E1EAB66961011ECA540626AC4F9AE02.roa (hash: TzVnkqN0tq39UUa2lfdZqlKLVdLg+S4NlfoqQ2G24uU=) 4: 457D2B5A28DC11ED839D6243C4F9AE02.roa (hash: 4G2u0IIjNz0CyenUMTN7OBV5SwfSrRJSXkJu6HMP/+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 01:05:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 978 (0x3d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2A61, serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB Validity Not Before: Jul 23 01:05:20 2025 GMT Not After : Jul 30 01:05:20 2025 GMT Subject: CN=68803551-04fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:99:1d:50:e9:5a:1e:51:11:7b:2a:1c:85:2f: 50:ee:4a:d0:67:0b:ac:26:b7:f3:14:c9:ac:9e:23: 08:06:d6:5e:02:37:da:05:86:52:52:27:41:c1:56: 8c:72:cc:94:e6:6a:83:be:d0:a8:98:5b:e4:44:f6: 76:12:1b:23:f3:77:d8:2e:d0:29:cc:d5:ce:8e:66: 4f:16:41:87:fb:e1:16:8b:35:39:4c:9c:e3:fa:97: fd:5a:59:47:76:be:0e:2a:cf:fc:e7:fd:9a:b6:4f: 05:ce:fd:10:4b:3a:2c:57:96:2f:46:c1:8d:b6:38: 97:2b:a3:29:d7:08:15:23:cc:a8:11:f1:2f:11:22: d0:69:6e:02:ff:36:4f:74:59:b3:74:73:ce:5b:dc: 02:af:26:de:e0:44:c6:ba:e1:cf:44:b1:e2:78:80: 9b:1e:57:5e:4a:12:76:d7:e1:dd:0f:9b:c2:bd:f9: 32:74:b1:e4:c9:d0:28:6c:5d:5f:0c:b2:a0:69:72: 45:e1:ea:5f:ff:c1:f3:7c:1e:3a:5e:e4:0e:e3:16: 29:47:18:8a:0b:d9:03:73:d3:80:53:7a:01:bc:92: ee:a5:27:db:b8:d0:62:d9:95:56:ad:ce:d3:90:18: 39:20:2d:85:a1:37:85:7c:07:ae:1c:47:a9:c3:03: 2f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F7:C8:7C:86:1C:D9:AC:BF:C5:B1:4C:F3:77:6E:79:05:4E:EB:FE X509v3 Authority Key Identifier: keyid:2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c5:ce:04:7e:99:89:d7:93:55:af:79:59:97:7d:b9:f7:ff: 2f:20:8b:2e:fb:67:f7:20:70:50:db:05:ba:58:33:1f:38:69: 6d:5c:d5:d5:9e:fc:9f:6e:4b:fd:f7:be:b5:f1:3b:88:88:3a: b0:93:f4:b0:34:18:78:68:e7:02:fb:66:9b:db:20:3b:53:60: 7f:d9:89:f9:32:59:0d:f8:6d:de:cc:3c:42:b5:b4:d6:5f:14: 58:77:5c:a2:6d:27:aa:21:12:eb:5a:0b:90:3a:7b:60:9f:23: d9:dd:b3:3e:6a:00:03:24:53:bb:5e:88:14:2a:37:cf:49:b1: d4:b8:57:e5:4d:83:ba:f1:0b:c1:99:93:98:a6:bc:87:6a:e8: 43:34:54:3c:70:0d:cc:c0:df:cc:12:30:92:58:82:05:d7:e9: 77:74:a7:d6:30:98:33:71:2b:ab:07:7e:6c:b4:b7:55:02:b1: 3f:42:6c:09:31:9d:06:41:fa:12:71:29:5e:e4:5c:8f:a0:64: 80:ce:4f:52:68:ba:57:fd:62:2a:43:21:a5:9f:cc:34:92:ac: ba:0f:e2:67:b0:65:5a:67:10:aa:6c:7a:8a:fd:73:35:73:e7: 80:51:44:ca:40:8c:56:10:3f:c0:45:e8:09:b5:a4:cc:ef:4b: af:0c:5a:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJBNjExMTAvBgNVBAUTKDJCNTE3QzZCNzlFM0NFQjAzODlENDFBQkM1RUNFMjEw N0ZFQzUzRkIwHhcNMjUwNzIzMDEwNTIwWhcNMjUwNzMwMDEwNTIwWjAYMRYwFAYD VQQDEw02ODgwMzU1MS0wNGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpkdUOlaHlEReyochS9Q7krQZwusJrfzFMmsniMIBtZeAjfaBYZSUidBwVaM csyU5mqDvtComFvkRPZ2Ehsj83fYLtApzNXOjmZPFkGH++EWizU5TJzj+pf9WllH dr4OKs/85/2atk8Fzv0QSzosV5YvRsGNtjiXK6Mp1wgVI8yoEfEvESLQaW4C/zZP dFmzdHPOW9wCrybe4ETGuuHPRLHieICbHldeShJ21+HdD5vCvfkydLHkydAobF1f DLKgaXJF4epf/8HzfB46XuQO4xYpRxiKC9kDc9OAU3oBvJLupSfbuNBi2ZVWrc7T kBg5IC2FoTeFfAeuHEepwwMvCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNj3yHyG HNmsv8WxTPN3bnkFTuv+MB8GA1UdIwQYMBaAFCtRfGt5486wOJ1Bq8Xs4hB/7FP7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkE2MS9FREMwOEZFNjk2 MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpyQTRuVUdyeGV6aUVIX3NV X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxRjhhM25qenJBNG5VR3J4ZXppRUhfc1Vfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkE2MS9FREMwOEZFNjk2MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpy QTRuVUdyeGV6aUVIX3NVX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAexc4EfpmJ15NVr3lZl3259/8vIIsu+2f3IHBQ2wW6WDMfOGltXNXV nvyfbkv997618TuIiDqwk/SwNBh4aOcC+2ab2yA7U2B/2Yn5MlkN+G3ezDxCtbTW XxRYd1yibSeqIRLrWguQOntgnyPZ3bM+agADJFO7XogUKjfPSbHUuFflTYO68QvB mZOYpryHauhDNFQ8cA3MwN/MEjCSWIIF1+l3dKfWMJgzcSurB35stLdVArE/QmwJ MZ0GQfoScSle5FyPoGSAzk9SaLpX/WIqQyGln8w0kqy6D+JnsGVaZxCqbHqK/XM1 c+eAUUTKQIxWED/ARegJtaTM70uvDFpU -----END CERTIFICATE-----Generated at Thu Jul 24 12:23:56 2025 by rpki-client